This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: DumG7p0GbcSTGBWlWTdj71W37azpBEQH3mtp9MOq9lo= Subject key identifier: 3C:5F:B5:53:B7:A2:F4:6E:D5:59:73:F9:D5:F7:D8:DF:F0:17:0E:7F Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 301823EC330C0821667C52FCA69FFDB218A06532 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0251 Signing time: Sun 01 Feb 2026 05:11:26 +0000 Manifest this update: Sun 01 Feb 2026 05:06:26 +0000 Manifest next update: Wed 04 Feb 2026 08:06:26 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 4: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: mUYOXTEbYd+9uAuyezibSFledAVL3Hw3v+lBEEIXEZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:18:23:ec:33:0c:08:21:66:7c:52:fc:a6:9f:fd:b2:18:a0:65:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Feb 1 05:06:26 2026 GMT Not After : Feb 4 08:06:26 2026 GMT Subject: CN=3C5FB553B7A2F46ED55973F9D5F7D8DFF0170E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:4e:45:93:77:a1:f4:69:cf:0d:11:fa:30: c1:63:c8:36:e0:58:33:7c:a3:b3:2e:1e:43:6d:a5: 73:7a:4a:8a:d2:d1:15:a7:71:6e:51:87:6a:f6:f0: 36:08:fe:b3:42:41:aa:47:6a:45:4f:4c:f9:b6:14: 73:66:4c:41:9c:e0:6b:63:9e:26:46:e4:8d:16:a6: de:6b:43:09:12:6d:6d:6c:66:05:b2:8e:8e:30:51: 04:ff:38:e9:ee:37:1b:27:47:6d:87:5d:e5:a9:cf: 60:a3:de:e3:68:eb:40:13:ae:45:2d:0b:f1:a3:26: df:90:07:8e:98:5d:fd:ad:12:09:8c:9d:d2:ca:ea: a1:c8:7d:b3:8b:28:a2:0a:b1:22:93:fd:65:33:be: cc:ca:df:34:8b:1a:ba:cc:4c:12:c3:a3:97:3f:52: 6e:17:4b:45:65:43:b9:b8:05:19:ef:42:80:d4:b8: 4e:56:3a:3f:99:b9:57:39:d6:68:9c:12:cf:8c:eb: b7:17:5d:44:91:81:58:a6:c1:b6:4e:f2:15:72:76: 33:c8:7b:33:6e:26:3b:9c:71:7c:e8:69:0c:59:77: 36:32:df:53:4f:8f:c2:e4:5d:f0:b3:26:75:b0:60: 2e:9f:03:6d:26:41:9e:04:41:60:4c:cc:07:df:25: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:B5:53:B7:A2:F4:6E:D5:59:73:F9:D5:F7:D8:DF:F0:17:0E:7F X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7a:eb:81:19:e3:fa:5c:74:61:47:b2:24:21:fc:b1:1e:6a: b0:0d:b4:b5:c0:2f:b3:a9:f8:4b:a6:7b:7a:8a:fd:e2:73:02: ae:fe:1e:8c:3f:cc:87:ec:80:ab:d4:8d:6c:b0:a7:24:42:24: 1b:8e:28:ec:cb:ec:06:cc:c0:fb:19:62:56:0e:4d:23:41:3e: ed:fb:de:d8:3a:96:00:cc:9e:28:f5:ce:f9:ac:8d:99:e5:81: d4:f8:b2:5c:ca:e2:59:2d:12:ae:b7:59:55:ed:48:85:50:92: e8:ea:2f:26:5c:69:b6:ec:39:a2:09:8c:f1:08:fb:cc:9f:e9: bf:ee:3c:df:04:ed:3c:d2:6b:29:ba:c2:2b:3a:90:c9:42:ee: b2:a2:44:d3:9f:89:59:68:31:fe:25:5d:5f:e8:db:6b:fc:e9: 89:5e:f2:f7:3d:85:a2:79:79:84:18:1b:e6:f9:17:70:7d:8a: ea:91:79:08:7a:6c:c1:66:ab:2d:47:22:b3:10:0c:e5:5f:f1: c1:38:cb:fa:4e:37:59:cd:4f:d4:51:4e:04:88:8f:19:2a:ac: ec:1d:f0:fc:c0:46:c1:9c:98:63:3a:b9:c1:2c:d5:5f:9a:f9: bf:82:7b:bd:24:b3:b2:1c:1e:8c:5e:e5:4e:cb:92:f7:7d:bc: b1:fb:74:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBgj7DMMCCFmfFL8pp/9shigZTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNjAyMDEwNTA2MjZaFw0yNjAyMDQwODA2MjZaMDMxMTAvBgNV BAMTKDNDNUZCNTUzQjdBMkY0NkVENTU5NzNGOUQ1RjdEOERGRjAxNzBFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+E5Fk3eh9GnPDRH6MMFjyDbg WDN8o7MuHkNtpXN6SorS0RWncW5Rh2r28DYI/rNCQapHakVPTPm2FHNmTEGc4Gtj niZG5I0Wpt5rQwkSbW1sZgWyjo4wUQT/OOnuNxsnR22HXeWpz2Cj3uNo60ATrkUt C/GjJt+QB46YXf2tEgmMndLK6qHIfbOLKKIKsSKT/WUzvszK3zSLGrrMTBLDo5c/ Um4XS0VlQ7m4BRnvQoDUuE5WOj+ZuVc51micEs+M67cXXUSRgVimwbZO8hVydjPI ezNuJjuccXzoaQxZdzYy31NPj8LkXfCzJnWwYC6fA20mQZ4EQWBMzAffJTU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPF+1U7ei9G7VWXP51ffY3/AXDn8wHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl664EZ4/pcdGFHsiQh/LEearANtLXAL7Op +Eume3qK/eJzAq7+How/zIfsgKvUjWywpyRCJBuOKOzL7AbMwPsZYlYOTSNBPu37 3tg6lgDMnij1zvmsjZnlgdT4slzK4lktEq63WVXtSIVQkujqLyZcabbsOaIJjPEI +8yf6b/uPN8E7TzSaym6wis6kMlC7rKiRNOfiVloMf4lXV/o22v86Yle8vc9haJ5 eYQYG+b5F3B9iuqReQh6bMFmqy1HIrMQDOVf8cE4y/pON1nNT9RRTgSIjxkqrOwd 8PzARsGcmGM6ucEs1V+a+b+Ce70ks7IcHoxe5U7Lkvd9vLH7dPo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:59 2026 by rpki-client